1810602d099efd49fdd2f01f2a204130549abf86c9373211a064fc820746bbf5 | Triage

Sharing

General

Target

1810602d099efd49fdd2f01f2a204130549abf86c9373211a064fc820746bbf5
Size

1.1MB
Sample

230426-d4kjwsgf4x
MD5

7a0709172c800e6a71b8525d615c0758
SHA1

7e738c95175a5633317b98b88fd416dbd32a23a7
SHA256

1810602d099efd49fdd2f01f2a204130549abf86c9373211a064fc820746bbf5
SHA512

47d06064163994876425f71ac7adc504ce15c3aeaf4aa1e9872669225e58677dbc84d5240d17a2303cdb5b22f62b951e60eef96f33eaa489bc42792404c480e0
SSDEEP

24576:RytZ9UXSuIaEvau6Tdqc6cF/T47VKM/zGVQnn6FCw8bAVV1x:ED9MqHCu6T8KFr2VH6DClMR

Score

10^/10

discovery evasion persistence spyware stealer trojan

Malware Config

Targets

- Target
  
  1810602d099efd49fdd2f01f2a204130549abf86c9373211a064fc820746bbf5
- Size
  
  1.1MB
- MD5
  
  7a0709172c800e6a71b8525d615c0758
- SHA1
  
  7e738c95175a5633317b98b88fd416dbd32a23a7
- SHA256
  
  1810602d099efd49fdd2f01f2a204130549abf86c9373211a064fc820746bbf5
- SHA512
  
  47d06064163994876425f71ac7adc504ce15c3aeaf4aa1e9872669225e58677dbc84d5240d17a2303cdb5b22f62b951e60eef96f33eaa489bc42792404c480e0
- SSDEEP
  
  24576:RytZ9UXSuIaEvau6Tdqc6cF/T47VKM/zGVQnn6FCw8bAVV1x:ED9MqHCu6T8KFr2VH6DClMR
Score

10^/10

discovery evasion persistence spyware stealer trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Windows security modification
  evasion trojan
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencespywarestealertrojan